Know what hit your network — before your subscribers call.
Flow-based network diagnostics for WISPs, ISPs, IX peering nodes and data centers. Passive deployment, Grafana-native dashboards, built to scale to Tb/s of traffic.
» built for
WISPs & ISPs
See what changed, who is affected and where the traffic came from.
Telco, transit & IX
Follow traffic across transit, peering and the IX fabric — and see what moves where.
Private data centers
Locate unusual behavior inside the environment and the workloads involved.
Monitoring shows there is a problem.
FLOWCUTTER shows what changed.
Challenge
Basic monitoring
FLOWCUTTER
Explains what happened
Alerts — then you dig through graphs yourself
Your own AI explains each incident in plain words
DDoS attack in progress
Shows high traffic
Identifies source, type, and affected segments
Uplink is full, customers complain
Shows the link is saturated
Shows who fills it — top customers, apps and ASes
Customer says the internet is slow
No traffic data
What their connection was doing — fix it with facts
Open port on customer device
Not visible
Automated scan surfaces it before it causes problems
Route changes on your peering
Not visible
Peering matrix — see how traffic shifts between peers and ASes
Built in. Always running.
Deep NetFlow diagnostics
See who talks to whom on your network. SNMP only shows how much.
Automated anomaly detection
Ready-made detection catches DDoS, amplification attacks and scans as they start.
Automated vulnerability scan
Checks your IP ranges for open ports and known CVEs. Runs on its own.
» REAL CASES. REAL NETWORKS.
What network teams solved with FLOWCUTTER.
» SEE IT IN ACTION
What your graphs don’t show.
FLOWCUTTER does — in plain words.
» BRING YOUR OWN AI
You don't need to be a security expert.
Your own Claude or ChatGPT explains every incident FLOWCUTTER finds — what happened, who is affected, what to do next.
Read me first
- Since02:15:00
- Targets203.0.113.10 · 203.0.113.24
- PatternDNS flood · UDP 53 · 3 source ASNs
- Top sourceAS64500 · 52 %
Incident summary
- WhatDDoS · DNS flood, port 53
- Who is hit2 customer IPs
- Where to lookAS64500 · 52 % of the attack
- Next stepRate-limit UDP 53 to the targets at the edge
» PARTNERS & INDUSTRY ASSOCIATIONS
» COMMON QUESTIONS
What network teams ask first.
Will it put load on my network?
No. FLOWCUTTER is passive — it reads flow data your routers already export, or captures via SPAN/TAP with the Probe. Nothing sits in the traffic path.
Do I need to change my network architecture?
Which devices are supported?
On-premise or cloud?
Who deploys it?
Our engineers do it remotely with your team, typically in a single session.
» 30 days. Your infrastructure. Your real traffic.
See FLOWCUTTER in your own network.
Your traffic on screen from day one. Full anomaly detection after 2 weeks of learning your network.
An engineer reviews your request and replies with clear next steps — within one business day.
